| Server IP : 172.67.201.108 / Your IP : 216.73.216.55 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.7 System : Linux ip-172-31-69-123.ec2.internal 6.1.177-224.371.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jul 27 20:28:29 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.24 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3.9/site-packages/cfnbootstrap/__pycache__/ |
Upload File : |
a
��Rj&p � @ s d dl mZ d dlZd dlmZ d dlZd dlZd dlmZm Z m
Z
m Z d dl Z d dl
Zd dlZd dlZd dlmZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZzd dlm Z W n" e y� G dd� de �Z Y n0 d Z d
Z e �!d �Z"e �!d �Z#e �!d
�Z$dgdd�Z%dhdd�Z&dd� Z'G dd� de(�Z)G dd� de*�Z+G dd� d�Z,G dd � d e*�Z-G d d � d e(�Z.d e'fd d!�Z/G d"d#� d#e �Z0did%d&�Z1d'd(� Z2d)d*� Z3e fd+d,�Z4e/d-d.�d/d0� �Z5e/d-d.�d1d2� �Z6d3a7e/d-d.�d4d5� �Z8d6d7� Z9d8d9� Z:e/d-d.�d:d;� �Z;e<g d<��Z=d=d>� Z>e�?d?�Z@e�?d@�ZAdAdB� ZBdCdD� ZCdEdF� ZDdGdH� ZEdIdJ� ZFdjdKdL�ZGdMdN� ZHdOdP� ZIdQdR� ZJG dSdT� dTe(�ZKG dUdV� dVe(�ZLG dWdX� dXe(�ZMG dYdZ� dZe(�ZNG d[d\� d\e(�ZOd]d^� ZPd_d`� ZQdadb� ZRdcdd� ZSdedf� ZTdS )k� )�
endpoint_toolN)� OptionGroup)�ConnectionError� HTTPError�Timeout�SSLError)�requests)�
ProxyErrorc s e Zd Z� fdd�Z� ZS )r c s t t| �j|i |�� d S �N)�superr �__init__)�self�args�kwargs�� __class__� �5/usr/lib/python3.9/site-packages/cfnbootstrap/util.pyr ) s zProxyError.__init__��__name__�
__module__� __qualname__r �
__classcell__r r r r r ( s r g N@�ntzcfn.initZwirez cfn.init.cmd� c s � fdd�t d| �D �S )zp
Returns a series of floating point numbers between 0 and min(max_sleep, 2^i-1) for i in 0 to max_tries
c s& g | ] }t � � t� d | d � �qS )� � )�random�min)�.0�i�� max_sleepr r �
<listcomp>; � z'exponential_backoff.<locals>.<listcomp>r )�range)� max_triesr" r r! r �exponential_backoff7 s r' c C s( | � t�� t|dt| � d � � dS )zF
Adds another exponential delay time to a list of delay times
r r N)�appendr r �len)� durationsr" r r r �extend_backoff> s
�r+ c C sH | j dkrd}n | j dk r*| j dvr*d}nd}t| j d| j | jf |�S )Ni� �RETRIABLE_FOREVERi� )i� i� �TERMINAL� RETRIABLEzHTTP Error %s : %s)� status_code� RemoteError�text)�resp�
retry_moder r r �_extract_http_errorF s
r4 c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�EtagCheckedResponsec C s� t |�| _d|jv r2t�d|j�r2|jd �d�nd }|j�d�dkrVt� d� d }n|rpd|v rpt� d� d }|| _
| j
r�z4zt j d d
�| _
W n t jd d d
�| _
Y n0 W q� tjd d
d� t� | _
Y q�0 nt� | _
d S )N�etagZAmazonS3�"z x-amz-server-side-encryptionzaws:kmsz6file uses KMS encryption; skipping checksum comparison�-zQcannot check consistency of file uploaded multipart; etag has - character presentF)Zusedforsecurity�md5z�Failed to retrieve md5 hash object from hashlib. Commonly this means the algorithm provider, likely OpenSSL's libcrypto library, disabled md5 when configured to be FIPS compliant. Skipping md5 checksum verification of S3 objects.T��exc_info)� check_status� _response�headersr Zis_service_url�url�strip�get�log�warn�_etag�hashlibr9 �_digest�newZwarning�
NoOpDigest)r
�responser6 r r r r S s6
��
��z EtagCheckedResponse.__init__c C s4 | j s
d S | j�� }| j |kr0td| j |f ��d S )Nz Expected digest %s; received %s)rD rF � hexdigest�
ChecksumError)r
Z final_digestr r r �
_check_digestr s
�z!EtagCheckedResponse._check_digestc C sH |� dd� |�� | j�d�D ]}|�|� | j�|� q | �� d S )Nr i ( )�seek�truncater= Z iter_content�writerF �updaterL )r
�dest�cr r r �write_to{ s
z EtagCheckedResponse.write_toc C s | j j}| j�|� | �� |S r
)r= �contentrF rP rL �r
rT r r r �contents� s z EtagCheckedResponse.contentsN)r r r r rL rS rV r r r r r5 Q s r5 c s e Zd Z� fdd�Z� ZS )rK c s t t| ��d |� d S r
)r rK r �r
�msgr r r r � s zChecksumError.__init__r r r r r rK � s rK c @ s4 e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd S ) rH c C s d| _ d| _d S )N���)Z digest_sizeZ
block_size�r
r r r r � s zNoOpDigest.__init__c C s d S r
r rU r r r rP � s zNoOpDigest.updatec C s d S r
r rZ r r r rJ � s zNoOpDigest.hexdigestc C s d S r
r rZ r r r �digest� s zNoOpDigest.digestc C s | S r
r rZ r r r �copy� s zNoOpDigest.copyN)r r r r rP rJ r[ r\ r r r r rH � s
rH c s* e Zd Zeg d��Zd� fdd� Z� ZS )r0 )r- r. r, r. c s2 t t| ��||� |tjvr(td| ��|| _d S )NzInvalid retry mode: %s)r r0 r � retry_modes�
ValueErrorr3 )r
�coderX r3 r r r r � s
zRemoteError.__init__)r. )r r r � frozensetr] r r r r r r r0 � s r0 c @ s e Zd Zdd� ZdS )�Sleeperc C s t �|� d S r
)�time�sleep)r
Zsecsr r r rc � s z
Sleeper.sleepN)r r r rc r r r r ra � s ra � c s � �fdd�}|S )Nc s � ��fdd�}|S )Nc s� t � }t��}|D �]�}|dkr6t�d|� |�|� z� | i |��W S ty� } z$t�d� td t|��}W Y d }~qd }~0 t y� } z$t�d� td t|��}W Y d }~qd }~0 t
� y� } z$t�d� td t|��}W Y d }~qd }~0 t �yR } z>t�d� td t|��}t |��d k �r>t
|� W Y d }~qd }~0 t�y� } zH�|j�}|jdk�r~|�n|jd k�r�t
|� t�|j� W Y d }~qd }~0 t�y� } z$t�d
� td t|��}W Y d }~qd }~0 t�y* } z$t�d � td t|��}W Y d }~qd }~0 t�yf } z$t�d � td t|��}W Y d }~qd }~0 t�y� } z&t�d
� td t|�d��W Y d }~qd }~0 0 q|�d S )Nr z'Sleeping for %f seconds before retryingr zChecksum mismatchr r � r- r, r zClient-side timeoutzGeneric IOErrorzUnexpected Exception)ra r' rB �debugrc r � exceptionr0 �strrK r r r) r+ r rI r3 �strerrorr � TimeoutError�IOError� Exception)r r Zsleeperr* �duration�eZ
last_error)�f�http_error_extractorr& r r �_retry� sX
�
"
"
"
"
"
"
(z3retry_on_failure.<locals>._decorate.<locals>._retryr )ro rq �rp r& �ro r � _decorate� s 4z#retry_on_failure.<locals>._decorater )r& rp rt r rr r �retry_on_failure� s 7ru c s e Zd Z� fdd�Z� ZS )rj c s t t| ��� || _d S r
)r rl r rX rW r r r r � s zTimeoutError.__init__r r r r r rj � s rj �< c s � fdd�}|S )Nc s �� fdd�}|S )Nc s| g �g �� ����fdd�}t j|d�}d|_|�� |��� |�� r`t�d�� td� ���rl�d ��rx�d S d S )Nc
sL z�� �� i ���� W n. tyF } z�� | � W Y d } ~ n
d } ~ 0 0 d S r
)r( rl )rn )r �excro r �ret_valr r �value_fn� s z>timeout.<locals>._decorate.<locals>._timeout.<locals>.value_fn)�targetTz Timeout of %s seconds breachedz*Execution did not succeed after %s secondsr ) � threadingZThreadZdaemon�start�joinZis_aliverB rC rj )r r ry Z
worker_thread)rm ro )r rw r rx r �_timeout� s
�z,timeout.<locals>._decorate.<locals>._timeoutr )ro r~ �rm rs r rt � s ztimeout.<locals>._decorater )rm rt r r r �timeout� s r� c C s
d� | �S )Nz http://169.254.169.254/latest{})�format)�pathr r r �_get_metadata_path s r� c C s0 t jtd�dditd�} | jdkr,| j�� S dS )z�
Try to get token for getting instance metadata(https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html)
z
/api/tokenz$X-aws-ec2-metadata-token-ttl-secondsZ21600)r> r� �� � )r Zputr� �REQUEST_TIMEOUTr/ r1 r@ �r2 r r r �_get_session_token s
�r� c C s8 |st j| |ddid�}nt j| |ddid|id�}|S )N�no_proxyz169.254.169.254/32)r� �proxieszX-aws-ec2-metadata-token)r� r� r> )r rA )r� �tokenr~ r2 r r r �_get_metadata_response' s �r� �
)r& c C s* t � } td�}t|| �}|�� |j�� S )Nz#/dynamic/instance-identity/document�r� r� r� �raise_for_statusr1 �rstrip�r� �
metadata_pathr2 r r r � get_instance_identity_document0 s
r� c C s* t � } td�}t|| �}|�� |j�� S )Nz$/dynamic/instance-identity/signaturer� r� r r r � get_instance_identity_signature9 s
r� �__unsetc C s2 t � } td�}d}t|| |d�}|�� |j�� S )Nz/meta-data/instance-idr )r~ )r� r� r� r� r1 r@ )r� r� Zrequest_timeout_in_secondsr2 r r r �_fetch_instance_idE s r� c C s8 t dkr4z
t� a W n ty2 t�d� da Y n0 t S )zS
Attempt to retrieve an EC2 instance id, returning None if this is not EC2
r� z Exception retrieving InstanceIdN)� _instance_idr� rk rB rg r r r r �get_instance_idO s
r� c C s
t � d uS r
)r� r r r r �is_ec2^ s r� c C sV t � }td�| ��}t||�}|�� |�� }t|d |d |d tj�|d d��S )Nz&/meta-data/iam/security-credentials/{}Z AccessKeyIdZSecretAccessKey�TokenZ
Expirationz%Y-%m-%dT%H:%M:%SZ) r� r� r� r� r� Zjson� Credentials�datetime�strptime)�namer� r� r2 Zroler r r �get_role_credsb s �
�r� )Tr �trueZyes�y�1c C s* | sdS t | t�r | �� �� n| } | tv S )z�
This tries to interpret if the user intended True
I don't use python's boolean equivalent because it's
likely that we're getting a string
F)�
isinstancerh �lowerr@ �_trues)�inputr r r �interpret_booleanu s r� z (?<!\\)\.z\\(?=\.)c C sN |s| S | }dd� t �|�D �D ](}||vr@t�d||� dS || }q |S )zReturns a value from metadata (a dict) at a (possibly empty) path, where path is in dotted object syntax (like root.child.leaf)c s s | ]}t �d |�V qdS )r� N)�_slash_replace�sub)r �sr r r � <genexpr>� r$ z extract_value.<locals>.<genexpr>z'No value at path %s (missing index: %s)N)�
_dot_split�splitrB rf )�metadatar� � return_dataZelementr r r �
extract_value� s
r� c C s8 t | dd�}|jdddddd� |jdd d
dd d� |S ) NZProxyzLOptions for specifying proxies. Format: [scheme://][user:password@]host:portr� z --http-proxyzA (non-SSL) HTTP proxy�string�
http_proxy��help�typerQ z
--https-proxyzAn HTTPS proxy� https_proxy�r Z
add_option)�parserZ proxy_groupr r r �get_proxy_options� s �
�
�r� c G s& | D ] }t j�|�}|r| S qdS )zEReturn the first non-empty environment proxy value (lowercase first).N)�os�environrA )�names�n�vr r r �
_env_proxy� s
r� c C st zJddl } | �| jd�}z"t| �|d�d �}W | �|� n | �|� 0 W n ty^ Y dS 0 |shdS |�dd�S )a� Windows only: read the IE/WinINET ``ProxyOverride`` bypass list from the
registry and return it as a no_proxy-style comma-separated string, or None.
``getproxies_registry()`` parses only ``ProxyServer``/``ProxyEnable`` -- it
NEVER emits the bypass list, so the old ``registry.get('no')`` was dead code
and a registry-only host would proxy traffic that ProxyOverride said to send
direct (a regression from 2.39, whose requests stack honoured ProxyOverride
via ``proxy_bypass_registry``). Read it directly. ``ProxyOverride`` is a
';'-separated list; the ``<local>`` token (bypass dotless/simple names) is
kept verbatim -- host_matches_no_proxy simply won't match it, which is a
harmless no-op rather than a wrong bypass.r Nz;Software\Microsoft\Windows\CurrentVersion\Internet SettingsZ
ProxyOverride�;�,)�winreg�OpenKey�HKEY_CURRENT_USERrh Z QueryValueExZCloseKeyrl �replace)r� �key�overrider r r �_registry_bypass� s � r� c C sf t jtkri S z ddlm} t| � p&i �}W n tyB i Y S 0 |rbd|vrbt� }|rb||d< |S )a Windows only: read the IE/WinINET system proxy from the registry the way
the old vendored requests stack (urllib.getproxies) did. Returns a dict of
scheme->url (keys like 'http','https') plus a 'no' bypass-list entry built
from ProxyOverride; {} on non-Windows or any error.r )�getproxies_registry�no)r� r� �WINDOWSZurllib.requestr� �dictrl r� )r� r� Zbypassr r r �_registry_proxies� s
r� c C s� i }t | dd�ptdd�}t | dd�p.tdd�}tdd�}tdd �}t� }|r�|sp|�d
�rp|d
}t�d d
� |s�|�d �r�|d }t�d d � |s�|�d
�r�|d
}|s�|�d�r�|d }|r�||d
< |r�||d < |r�||d
< |r�||d< |r�|S dS )a Resolve proxy settings from CLI options, falling back to the standard
proxy environment variables. An explicit --http-proxy/--https-proxy flag
always wins; env vars only fill the gaps. ``options`` may be None (used by
req_opts to resolve env-only proxies for downloads).r� NZ
HTTP_PROXYr� Z HTTPS_PROXY� all_proxyZ ALL_PROXYr� ZNO_PROXY�httpzIUsing system/registry proxy for %s (no CLI flag or environment proxy set)�https�allr� )�getattrr� r� rA rB rf )�optionsZ return_infor� r� r� r� �registryr r r �
get_proxyinfo� s4
r� c C s` t | dd�}|jdddddd� |jd d
d dd d� |jd d
dddd� |jd ddddd� |S )NzAWS Credentialsz/Options for specifying AWS Account Credentials.z-fz--credential-filez\A credential file, readable only by the owner, with keys 'AWSAccessKeyId' and 'AWSSecretKey'r� �credential_filer� r� z--rolez An IAM Role�iam_rolez --access-keyzAn AWS Access Key�
access_keyz --secret-keyzAn AWS Secret Key�
secret_keyr� )r� Z creds_groupr r r �get_cred_options
s �
�
�
�
�r� c
C sz | j rXz t| j �W S tyT } z*td|j tjd� t�d� W Y d }~qvd }~0 0 n | jrht | j�S t
| j | j �S d S )Nz+Error retrieving credentials from file:
%s)�filer )
r� �extract_credentialsrk �printri �sys�stderr�exitr� r� r� r� r� )r� rn r r r �get_creds_or_die s ��"
r� c C s� t j�| �stdd| ��t jdkrRt �| �tj }tj|@ sHtj|@ rRtdd��d\}}t | d��V}dd� |D �D ]6}|�
d �r�|� d
�d }qt|�
d �rt|� d
�d }qtW d � n1 s�0 Y |r�|s�tdd
��t ||�S )z�
Extract credentials from a file at path, returning tuple of (access_key, secret_key)
Raises an exception if the file is readable by group or other.
Nz#Credential file was not found at %s�posixz]Credential file cannot be accessible by group or other. Please chmod 600 the credential file.)r� r� �rc s s | ]}|� � V qd S r
)r@ )r �liner r r r� < r$ z&extract_credentials.<locals>.<genexpr>zAWSAccessKeyId=�=r z
AWSSecretKey=zICredential file must contain the keys 'AWSAccessKeyId' and 'AWSSecretKey')
r� r� �isfilerk r� �stat�ST_MODE�S_IRWXG�S_IRWXO�open�
startswith� partitionr� )r� �moder� r� ro r� r r r r� + s(
�
.�r� c @ s< e Zd ZdZdd� Zedd� �Zedd� �Zedd � �Zd
S ) �
ProcessResultz*
Return object for ProcessHelper
c C s || _ || _|| _d S r
)� _returncode�_stdout�_stderr)r
�
returncode�stdoutr� r r r r S s zProcessResult.__init__c C s | j S r
)r� rZ r r r r� X s zProcessResult.returncodec C s
t | j�S r
)� _ensure_strr� rZ r r r r� \ s zProcessResult.stdoutc C s
t | j�S r
)r� r� rZ r r r r� ` s zProcessResult.stderrN) r r r �__doc__r �propertyr� r� r� r r r r r� M s
r� c @ s. e Zd ZdZejejddfdd�Zdd� ZdS )�
ProcessHelperz4
Helper to simplify command line execution
Nc C sZ || _ || _|| _|s d | _n2tjtkrFtdd� t|� � �D ��| _n
t|�| _|| _
d S )Nc s s" | ]\}}t |�t |�fV qd S r
)rh )r �kr� r r r r� r r$ z)ProcessHelper.__init__.<locals>.<genexpr>) �_cmdr� r� �_envr� r� r� r� �iter�items�_cwd)r
�cmdr� r� �env�cwdr r r r k s
zProcessHelper.__init__c
C sH t jtk�rt| jt�r | j}n t�| j�}d}z*tjdtj tj d| j
| j d�}|� � W n6 t
y� } z tjd|d� d}W Y d}~n
d}~0 0 tj| j|r�| jntj|r�| jntjt| jt�| j
| j d�}|r�t�d� |� � }nt�d � |�� d
d
g}n0tj| j| j| jt| jt�| j
| j d�}|� � }t|j|d |d �S )
zV
Calls the command, returning a tuple of (returncode, stdout, stderr)
Tz echo 'hello')r� r� �shellr r zPIO redirection does not work, the output of commands will not be written to logsr: FNz9IO redirection is working. Redirecting the output to logsz<IO redirection does not work. Redirecting the output to nullr� r r )r� r� r� r� r� rh �
subprocessZ list2cmdline�Popen�PIPEr� r� Z communicaterl rB �infor� ZDEVNULLr� �waitr� r� )r
ZcommandZio_redirection_works�prn Zprocessr� r r r �callw s^ �
�
�
� �zProcessHelper.call) r r r r� r r �STDOUTr r r r r r r� e s r� c @ s, e Zd Zejejdddfdd�Zdd� ZdS )�LoggingProcessHelperr� Nc C s" || _ t|||||�| _|| _d S r
)r� r� �process_helperr� )r
r� r� r� r� r r r r r r � s z LoggingProcessHelper.__init__c C s� t �d� t �t| j�� | j�� }|j}|j}|rnt �d�dd�� |� d�D ]}t �d| � qPt �d� |r�t �d�dd�� |� d�D ]}t �
d| � q�t �d� |j r�t �
d |j � n
t �d
� |S ) Nz<============================================================zCommand Outputrv r8 F� z<------------------------------------------------------------zCommand ErrorszExited with error code %dzCompleted successfully.) �cmd_logr r� r� r r r� r� �center�
splitlines�errorr� )r
�results�outputr� r� r r r r � s&
zLoggingProcessHelper.call)r r r r r r
r r r r r r r � s r c @ sJ e Zd ZdZd
dd�Zedd� �Zedd� �Zed d
� �Zed d � �Z dS )r� z
AWS Credentials
Nc C s || _ || _|| _|| _d S r
)� _access_key� _secret_key�_security_token� _expiration)r
r� r� �security_token�
expirationr r r r � s zCredentials.__init__c C s | j S r
)r rZ r r r r� � s zCredentials.access_keyc C s | j S r
)r rZ r r r r� � s zCredentials.secret_keyc C s | j S r
)r rZ r r r r � s zCredentials.security_tokenc C s | j S r
)r rZ r r r r � s zCredentials.expiration)NN)
r r r r� r r� r� r� r r r r r r r� � s
r� c @ sP e Zd ZdZdd� Zdd� Zedd� �Zedd � �Zed
d � �Z ed d
� �Z
dS )�RoleBasedCredentialsz
Refreshing credentials
c C s" || _ d | _t�� | _| �� d S r
)�
_role_name�_credsr{ ZLock�
_refresh_lock�_refresh)r
Z role_namer r r r � s
z RoleBasedCredentials.__init__c C s� | j �� | jr,| jjtjdd� tj�� k r�t�d� zt| j �| _W n< t
y� | jrl| jjtj�� k rtt d��t� d� Y n0 | jW d � S 1 s�0 Y d S )Nr )Zhoursz!Refreshing role-based credentialsz,Credentials have expired and refresh failed.zCException while refreshing credentials; will refresh on next access)
r r r r� Z timedeltaZutcnowrB r r� r rk � RuntimeErrorrg rZ r r r r � s $
��
z RoleBasedCredentials._refreshc C s
| � � jS r
)r r� rZ r r r r�
s z RoleBasedCredentials.access_keyc C s
| � � jS r
)r r� rZ r r r r� s z RoleBasedCredentials.secret_keyc C s
| � � jS r
)r r rZ r r r r s z#RoleBasedCredentials.security_tokenc C s
| � � jS r
)r r rZ r r r r s z RoleBasedCredentials.expirationN) r r r r� r r r� r� r� r r r r r r r � s
r c O s. t �d| j| j| j� | js*t �d| j� d S )Nz Response: %s %s [headers: %s]zResponse error: %s)�wire_logrf r/ r? r> �okrT )r2 r r r r r � log_response s
�r" c C s dt iS )NrI )r" r r r r � get_hooks% s r# c C sR | r t | �ni } d| d< t� | d< d| d< t| d< d| vrNtd �}|rN|| d< | S )NTZverifyZhooks�streamr� r� )r� r# r� r� )r Z env_proxiesr r r �req_opts) s
r% c C s | � � | S r
)r� r� r r r r< : s r< c C s t | t�r| �d�} | S )N�utf8)r� �bytes�decode)Z
input_datar r r r� ? s
r� )r )r )rv )N)UZ cfnbootstrapr rE Zoptparser r{ r� Z cfnbootstrap.http.exceptionsr r r r ZloggingZos.pathr� r �reZcfnbootstrap.httpr r� r r� rb Zuuid�inspectZtempfileZshutilZ-cfnbootstrap.http.packages.urllib3.exceptionsr � ImportErrorrl r� r� Z getLoggerrB r r r' r+ r4 �objectr5 rk rK rH r0 ra ru rj r� r� r� r� r� r� r� r� r� r� r� r` r� r� �compiler� r� r� r� r� r� r� r� r� r� r� r� r� r r� r r" r# r% r< r� r r r r �<module> s�
9
;
$
("T +